Privacy Policy

Your privacy is important to us. This Privacy Policy explains how Insightful Saga ("we", "our", or "us") collects, uses, stores, and protects your information when you visit and interact with https://www.insightfulsaga.com and associated subdomains.

We collect information in the following categories:

Paid subscriptions, lifetime passes, and individual practice exam purchases are processed through our payment gateway partner, Razorpay (and PayPal where applicable).

• No Cardholder Data Stored: Insightful Saga never collects, processes, or stores full payment card numbers, card expiration dates, or CVV/CVC security codes on our servers. All payment entry happens directly inside the PCI-DSS Level 1 certified gateway window.
• Transaction Metadata Retained: To provision entitlements and maintain accounting records, our server stores payment transaction identifiers (order ID, payment ID, signature), masked payment method (e.g., UPI, Netbanking, card brand with last 4 digits), billing currency, amount paid, and subscription renewal status.
• Audit & Receipts: Payment records are maintained for tax compliance, fraud prevention, and customer-accessible billing history generation under `/account/billing`.

We may partner with third-party advertising networks, including Google AdSense, to serve advertisements across public platform tutorials.

• Advertising Cookies: Google and its advertising partners use cookies (including the DoubleClick cookie) to serve ads based on user visits to this or other websites.
• Opting Out: You can opt out of personalized advertising by visiting Google Ads Settings or through industry opt-out portals such as AboutAds.info.

We use the data we collect solely for the following legitimate purposes:

• Operating, updating, and securing the educational platform, code runners, and interactive arenas.
• Authorizing and enforcing entitlement access to premium learning materials and certification exams.
• Generating personalized learning analytics, completion records, and verifiable certificates.
• Sending scheduled monthly progress digests and critical transactional notices (e.g., payment receipts, renewal reminders, password resets).
• Detecting and mitigating platform abuse, unauthorized credential sharing, and automated scraping.
• Complying with statutory accounting and tax regulations.

InsightfulSaga sends two primary categories of emails:

• Transactional Emails: Payment confirmations, billing receipts, account security alerts, and password resets. These are required for service provision and cannot be disabled while maintaining an active account.
• Engagement & Educational Reports: Monthly learning progress summaries and optional curriculum updates.

InsightfulSaga provides a public certificate verification registry (`/verify-certificate/:certificateId`) to enable employers and educational institutions to validate authentic credentials.

• Publicly Disclosed Verification Fields: Certificate Holder Full Name, Credential ID, Exam / Specialization Title, Issue Date, and Expiration / Validity status.
• Strictly Confidential Fields: Question-by-question responses, sectional percentage breakdowns, number of attempts taken, billing transactions, and email addresses are never exposed on public verification endpoints.

We work with trusted third-party providers who adhere to rigorous data protection standards:

• Google Cloud & Firebase: Authentication, Firestore persistent storage, security rules, and cloud infrastructure.
• Razorpay: PCI-DSS Level 1 payment gateway processing (INR and international cards/wallets).
• Google Analytics (GA4): Aggregated performance metrics configured with IP anonymization.

Please review our dedicated Cookie Policy for an itemized inventory of essential and non-essential cookies. You can modify cookie preferences via browser settings at any time.

We enforce industry-standard security measures including HTTPS TLS 1.3 transit encryption, Firebase Admin server token validation, strict Firestore security rules, and principle-of-least-privilege database access.

Account progression data is retained for the lifetime of your registered account. Financial transaction records are retained for the statutory period mandated by applicable tax and accounting laws (typically 7 years).

Regardless of your country of residence, you have the right to access, export, rectify, or request the deletion of your personal data.

• Data Export: Request a machine-readable export of your learning history, exam records, and billing receipts.
• Account Deletion: Request permanent erasure of your account and personal identifiers by contacting privacy support.

To submit a privacy or data rights request, email support@insightfulsaga.com or insightfulsaga@gmail.com.

InsightfulSaga does not knowingly solicit or collect personal information from individuals under 13 years of age (or under 16 in applicable EU jurisdictions). If an account is discovered to have been created by a child under these ages without verified parental consent, we will promptly purge the data.

We may revise this Privacy Policy periodically to reflect service enhancements, infrastructure updates, or regulatory obligations. Material modifications will be announced via platform notice or direct email prior to taking effect.

For questions regarding this policy, data rights requests, or billing privacy:

• Billing & Payments: billing@insightfulsaga.com
• Privacy & Data Rights: support@insightfulsaga.com
• General Inquiries: insightfulsaga@gmail.com
• Online Contact: InsightfulSaga Contact Form